cxr.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:8b:4b:b5:94:97:bf:7d:19:46:b7:ed:9b:fe:db:ea:e7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cxr.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:8b:4b:b5:94:97:bf:7d:19:46:b7:ed:9b:fe:db:ea:e7
Serial Number (int): 282279237974025349674683431490692339985127
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:c3:b1:af:e5:92:65:7f:ad:64:c7:2d:78:7d:7f:11:c0:b8:f6:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:99:5d:d2:3d:db:bf:5e:3b:0d:40:e1:43:0c:04:2d:09:5e:d6:2b
Fingerprint (sha256): fd:9b:da:a1:ed:48:bb:6b:c5:19:40:6e:bf:4a:6d:e5:f8:08:25:ba:d9:26:f5:c3:83:de:71:f1:b8:b1:44:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cxr.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cxr.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adakgroup.com
*.bmwvin.de
*.chekdeinpasswort.de
*.chieropraktiker.de
*.chimneycleaner.com.au
*.cxr.com.au
*.dataentry.es
*.diamondisland.com.au
*.diba-bank.de
*.elias-schuett.de
*.employeeconnnection.net
*.fazi.net
*.freetoair.org
*.gendaweb.org
*.gesundheitsclub-reisen.de
*.goldencrossrestaurant.co.uk
*.hensel-verpackung.de
*.highspeedingtraining.co.uk
*.jjcars.com.au
*.junky.com.au
*.laserpointer.com.au
*.lecithin.com.au
*.liktk.it
*.maxspeedparts.de
*.mazaon.de
*.miltaryvetspx.com
*.minecraftorge.net
*.miniurl.co.uk
*.mlsrealtor.com
*.myvolunteerpage.org
*.onlinetrainingprogram.com.au
*.pasifikenergitrans.com
*.peoplesjewlers.ca
*.pyrenex.co.uk
*.rareflix.com
*.schwanngerschaft.de
*.slipcovers.com.au
*.soport.me
*.statesmanwarrenty.co.uk
*.tenfe.es
*.tests9ieger.de
*.testsideger.de
*.vlx.com.au
*.wikihow.ch
*.wlycompletesave.co.uk
*.wmss.ca
*.wnytimes.com
*.wwwfigloans.com
*.youpopcorn.com
*.yourdreamhomes.es
adakgroup.com
bmwvin.de
chekdeinpasswort.de
chieropraktiker.de
chimneycleaner.com.au
cxr.com.au
dataentry.es
diamondisland.com.au
diba-bank.de
elias-schuett.de
employeeconnnection.net
fazi.net
freetoair.org
gendaweb.org
gesundheitsclub-reisen.de
goldencrossrestaurant.co.uk
hensel-verpackung.de
highspeedingtraining.co.uk
jjcars.com.au
junky.com.au
laserpointer.com.au
lecithin.com.au
liktk.it
maxspeedparts.de
mazaon.de
miltaryvetspx.com
minecraftorge.net
miniurl.co.uk
mlsrealtor.com
myvolunteerpage.org
onlinetrainingprogram.com.au
pasifikenergitrans.com
peoplesjewlers.ca
pyrenex.co.uk
rareflix.com
schwanngerschaft.de
slipcovers.com.au
soport.me
statesmanwarrenty.co.uk
tenfe.es
tests9ieger.de
testsideger.de
vlx.com.au
wikihow.ch
wlycompletesave.co.uk
wmss.ca
wnytimes.com
wwwfigloans.com
youpopcorn.com
yourdreamhomes.es

Other certificates including the domain name cxr.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for cxr.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282279237974025349674683431490692339985127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 03:25:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 03:25:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cxr.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805234769590692060410020144819217434320737704570549952469244920642594961936265322435260031682038077899336791761417567522762178426376401851777924116661660768077369113897262057834688715403897739174366896159219318192967726991543032749756874695872433220694205483287962581560057680824405977873177554311806854803579119621478306175092393579893063704676927652131608868097921518552287470477862484959514134724978328061960666039591963483235893253270534165139065968819144286548652102109423347843839874352552211184287255926673024096049563841759278185055371056759139628090364286688497475293734951796387010564571116045946690619058398516273479176271778260497132745556702669244761633689082669125788663206320919993303757008220481296390170622179328869633602364292318124978202087188313270222160875447192560527750640653045324693631539992907998966033785209011949869407500229585489451149043821954063118645431850317011280282108306956168716350352353515351131709132893771484921453675771886846902239123511756779878981999463513261997873960723609986895535621082138414107426863875225177081655692809176635618992927571230503711090350137320235315422010066267548512744759050486099144708747445633336574374018246401802539048848420842429746174713030011273142513129621371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ec3b1afe592657fad64c72d787d7f11c0b8f65f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adakgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmwvin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chekdeinpasswort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chieropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chimneycleaner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cxr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dataentry.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diamondisland.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diba-bank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elias-schuett.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employeeconnnection.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fazi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freetoair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gendaweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheitsclub-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldencrossrestaurant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hensel-verpackung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highspeedingtraining.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junky.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserpointer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lecithin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liktk.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxspeedparts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mazaon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miltaryvetspx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftorge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miniurl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlsrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvolunteerpage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinetrainingprogram.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasifikenergitrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peoplesjewlers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyrenex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rareflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwanngerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slipcovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statesmanwarrenty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenfe.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tests9ieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsideger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vlx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikihow.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wlycompletesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmss.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wnytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfigloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youpopcorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourdreamhomes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adakgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwvin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chekdeinpasswort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chieropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chimneycleaner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataentry.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondisland.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diba-bank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elias-schuett.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeeconnnection.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetoair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gendaweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheitsclub-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldencrossrestaurant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hensel-verpackung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highspeedingtraining.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junky.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserpointer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecithin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liktk.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxspeedparts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazaon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltaryvetspx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftorge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miniurl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlsrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvolunteerpage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinetrainingprogram.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasifikenergitrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesjewlers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyrenex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rareflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwanngerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slipcovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statesmanwarrenty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenfe.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tests9ieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsideger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikihow.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlycompletesave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmss.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfigloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youpopcorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdreamhomes.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185c3203d71000004030046304402205fa9c1e49dd39a38e8e6bdf8b8c0c779ef5c0801d94f5695cb2ebbe54153e61702201421c8f98a02ccdefafc6b6a6cc996b3271a3ef1577a34078b192fc717fa8938007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185c3203d63000004030047304502201af579108dd2b4b2efbd66b7741f93d7afd40148cee6b4d2770aa5fd806f4165022100f04b16c36e7dbbecc9a63a921c891e2d18646bfb83c4a5838baff7c44a14c671
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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